云安全4项标准在我国云安全评估中的应用

Application of Four National Standards of Cloud Security to Cloud Security Assessment of China

针对安全评估标准缺乏导致我国云计算服务发展现状远远落后于发展需求的问题,围绕国家大力发展云计算服务产业所需云服务安全评估、云服务安全使用、云服务安全持续监管等方面的需求,分别编制能力要求、安全管理与运行监管系列标准,有力支撑了我国云服务安全评估工作的开展。系列标准自发布以来,通过安全评估的云服务平台超过80家,在政务云、金融云等重点行业云得到广泛应用。

In view of the lack of cloud security assessment standards,the current situation of cloud computing service development in China lags far behind demands,focusing on cloud security assessment,cloud service security use,cloud service security continuous supervision required by the country’s vigorous development of cloud computing service industry,we have compiled a series of standards for capability requirements,security management and operation supervision,which strongly supported the development of cloud service security assessment in my country.Since the release of the series of standards,more than 80 cloud service platforms have passed the security assessment,and have been widely used in key industries such as government cloud and financial cloud.